Static task
static1
Behavioral task
behavioral1
Sample
c198f3da36d8015d869bc5c6578e9e430350e53dacef137b889f371bf216a199.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c198f3da36d8015d869bc5c6578e9e430350e53dacef137b889f371bf216a199.exe
Resource
win10v2004-20220812-en
General
-
Target
c198f3da36d8015d869bc5c6578e9e430350e53dacef137b889f371bf216a199
-
Size
191KB
-
MD5
45e0564366135c2b9d5cc158cbb6fb12
-
SHA1
c76bea4f258c557baa127615506bf24d82f81da3
-
SHA256
c198f3da36d8015d869bc5c6578e9e430350e53dacef137b889f371bf216a199
-
SHA512
5b077760c57a34d47523b4955707f00a96740085f54586fe28217e48fdb35f3a4110a673ef0fb953fe4a8605301e2718a12aa4097aac561a2e530f7c9d3ccd29
-
SSDEEP
3072:VcVDiyO7XmEFDj2s23BTYwgWSW0RWLPyxau0xhQPvd7d+DBxtZlN5FCHo4Z:mBFIX9FCk7XqP+H0fQXGDPtBW
Malware Config
Signatures
Files
-
c198f3da36d8015d869bc5c6578e9e430350e53dacef137b889f371bf216a199.exe windows x86
cbf4e9f7930ec855ff1a7abecf33dec1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_cexit
_exit
__p__fmode
__setusermatherr
_XcptFilter
__p__commode
strspn
__set_app_type
_controlfp
vswprintf
perror
_initterm
mbtowc
_ismbblead
exit
_amsg_exit
__getmainargs
kernel32
QueryPerformanceCounter
LocalLock
FindResourceA
VirtualFree
GetShortPathNameA
VerSetConditionMask
GlobalHandle
SearchPathW
DeleteFileA
user32
ClipCursor
DrawStateW
CharNextExA
GetWindowTextLengthW
VkKeyScanW
GetWindowLongW
DrawIcon
PostMessageA
GetClassInfoW
SetRectEmpty
Sections
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ